IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 34.156.121.5 ip

Score
100
/100
raw: 1036.16
Reports
122
Last Reported
2026-11-09 05:44 UTC
Categories
Config Exposure Probe (72) Scanning (41) API Probe (5) Admin Panel Probe (3) Web Stack Probe (1)

Network details

ASN
396982
Organization
Google LLC
Country
BE

Threat Intelligence enriched 2026-11-09 05:43 UTC

Reverse DNS
5.121.156.34.bc.googleusercontent.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-09 05:43 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-11-09 05:43 UTC wp-content direct GET /wp-content/debug.log burst
2026-11-09 05:43 UTC catch-all-config direct GET /web/.env burst
2026-11-09 05:43 UTC catch-all-suspicious direct GET /sftp-config.json burst
2026-11-09 05:43 UTC catch-all-suspicious direct GET /web.config burst
2026-11-09 05:43 UTC api-version-enum direct GET /v1/.env burst
2026-11-09 05:43 UTC docker-registry direct GET /v2/.env burst
2026-11-09 05:43 UTC catch-all-framework direct GET /vendor/composer/installed.json burst
2026-11-09 05:43 UTC catch-all-config direct GET /test/.env burst
2026-11-09 05:43 UTC laravel-log direct GET /storage/logs/laravel.log burst
2026-11-09 05:43 UTC catch-all-config direct GET /staging/.env burst
2026-11-09 05:43 UTC catch-all-script direct GET /settings.php burst
2026-11-09 05:43 UTC catch-all-config direct GET /src/.env burst
2026-11-09 05:43 UTC catch-all-script direct GET /phpinfo.php burst
2026-11-09 05:43 UTC catch-all-config direct GET /production/.env burst
2026-11-09 05:43 UTC catch-all-config direct GET /public/.env burst
2026-11-09 05:43 UTC catch-all-suspicious direct GET /runtime-config.js burst
2026-11-09 05:43 UTC catch-all-scan direct GET /phpinfo burst
2026-11-09 05:43 UTC catch-all-suspicious direct GET /secrets.json burst
2026-11-09 05:43 UTC catch-all-config direct GET /sendgrid.env burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
103.140.87.231 ip
100
 12 BD 2026-11-09 06:25 UTC 2026-11-09 06:24 UTC
103.31.178.18 ip
100
 29 BD 2026-11-09 06:26 UTC 2026-11-09 06:22 UTC
94.245.145.161 ip
100
 8 RU 2026-11-09 06:23 UTC 2026-11-09 06:22 UTC
197.240.60.99 ip
100
 31 TN 2026-11-09 06:27 UTC 2026-11-09 06:22 UTC
34.124.168.69 ip
63
 2 SG 2026-11-09 06:30 UTC 2026-11-09 06:21 UTC
45.66.211.28 ip
50
 1 RU 2026-11-09 06:16 UTC 2026-11-09 06:16 UTC
34.174.119.84 ip
100
 106 US 2026-11-09 06:00 UTC 2026-11-09 05:57 UTC
151.115.32.220 ip
33
 2 PL 2026-11-09 05:55 UTC 2026-11-09 05:55 UTC
34.158.33.101 ip
99
 10 SG 2026-11-09 06:27 UTC 2026-11-09 05:53 UTC
45.194.92.221 ip
97
 6 US 2026-11-09 06:34 UTC 2026-11-09 05:51 UTC
65.111.2.49 ip
50
 1 US 2026-11-09 05:44 UTC 2026-11-09 05:44 UTC
45.3.51.120 ip
59
 1 US 2026-11-09 05:44 UTC 2026-11-09 05:44 UTC
65.111.14.168 ip
50
 1 US 2026-11-09 05:44 UTC 2026-11-09 05:44 UTC
45.3.37.99 ip
59
 1 US 2026-11-09 05:44 UTC 2026-11-09 05:44 UTC
209.50.167.6 ip
59
 1 US 2026-11-09 05:44 UTC 2026-11-09 05:44 UTC
104.207.37.55 ip
50
 1 US 2026-11-09 05:44 UTC 2026-11-09 05:44 UTC
104.167.25.212 ip
59
 1 US 2026-11-09 05:44 UTC 2026-11-09 05:44 UTC
34.156.121.5 ip
100
 122 BE 2026-11-09 05:44 UTC 2026-11-09 05:43 UTC
72.60.203.40 ip
100
 10 IN 2026-11-09 05:44 UTC 2026-11-09 05:43 UTC
206.189.209.181 ip
70
 2 US 2026-11-09 05:35 UTC 2026-11-09 05:35 UTC
34.143.148.97 ip
63
 2 SG 2026-11-09 06:09 UTC 2026-11-09 05:33 UTC
164.90.219.112 ip
80
 6 DE 2026-11-09 05:33 UTC 2026-11-09 05:33 UTC
34.21.249.24 ip
39
 1 SG 2026-11-09 05:26 UTC 2026-11-09 05:26 UTC
34.142.241.239 ip
86
 4 SG 2026-11-09 06:04 UTC 2026-11-09 05:25 UTC
162.158.103.193 ip
45
 1 PL 2026-11-09 05:19 UTC 2026-11-09 05:19 UTC

Showing 1-25 of 89944 indicators